NACHA Phishing Alert


NACHA – The Electronic Payments Association has received reports that individuals and/or companies have received fraudulent emails that have the appearance of having been sent from NACHA. These emails vary in content and appear to be transmitted from email addresses associated with the NACHA domain (@nacha.org). Some bear the name of fictitious NACHA employees and/or departments. See an example of the email below.

Be aware that phishing emails frequently have attachments and/or links to Web pages that host malicious code and software. Do not open attachments or follow Web links in unsolicited emails from unknown parties or from parties with whom you do not normally communicate, or that appear to be known but are suspicious or otherwise unusual.

NACHA itself does not process nor touch the ACH transactions that flow to and from organizations and financial institutions. NACHA does not send communications to individuals or organizations about individual ACH transactions that they originate or receive.

If malicious code is detected or suspected on a computer, consult with a computer security or anti-virus specialist to remove malicious code or re-install a clean image of the computer system.

Always use anti-virus software and ensure that the virus signatures are automatically updated.

Ensure that the computer operating systems and common software applications security patches are installed and current.

Additional information and guidance on phishing is available from the Federal Deposit Insurance Corporation (FDIC).

Be alert for different variations of fraudulent emails.

If you receive these emails in your inbox, it's recommended that you:
  • Delete the Email.
  • Don’t respond!
  • Don’t open any attachments. They may download a virus to your computer.
  • Don’t click on any links or disclose any personal or financial information.
  • Remember that corporate and government logos can easily be copied from the Internet to make the email look more authentic.

Fraudulent Email Example:


If you have further questions or feel that your account has been compromised, please contact us at 815.777.6300.